Cisco DS-C9216I-K9, Руководство по настройке

Страница: 228 / 436

20-4
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
OL-7753-01
Chapter 20 Configuring Port Security
About Auto-Learn
Step 4
Choose the port binding option that you want to apply to the switch from the drop-down menu. Choose
from the following options:
• Activate—Valid port bindings are activated.
•
Activate (TurnLearningOff)—Valid port bindings are activated and the auto-learn option is turned
off.
• ForceActivate—Activation is forced.
•
ForceActivate (TurnLearningOff)—Activation is forced and the auto-learn option is turned off.
• Deactivate—Deactivates all currently active port bindings.
•
NoSelection—No action is taken
Displaying Activated Port Bindings
To display port security active port bindings, perform the following steps.
Step 1
From the Fabric Manager, choose Port Security from one of the VSANs on the menu tree.
The Information pane of the Fabric Manager displays port security information for that VSAN.
Step 2 Click the Active tab.
You see a list of the port security active port bindings for that VSAN.
Configuring Auto-Learning
The state of the auto-learning configuration depends on the state of the port security feature:
•
If the port security feature is not activated, the auto-learn option is disabled by default.
•
If the port security feature is activated, the auto-learn option is enabled by default.
If the auto-learn option is enabled on a VSAN, you cannot activate the database for that VSAN without
the force option.
Table 20-1 summarizes the authorized connection for device requests.
Table 20-1 Auto-learn Device Authorization
Device (pWWN, nWWN,
sWWN)
Requests Connection to Authorization Condition
Configured with one or
more switch ports A switch on configured
ports Permitted 1
A switch on other ports Denied 2
Not configured Aport that is not
configured Permitted if auto-learn
option enabled
3
Denied if auto-learn
disabled
4